Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
File:                     66ee137c-4201-4a21-a4f5-2f3161305281.cer (raw, json)
Hash identifier:          9OGc7fxi4gxEyI6bAbxR9jJijvUOW/dqOUfWrgdytZg=
Subject key identifier:   93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584570EC5E78A25CE85F52BBA000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 05 Apr 2024 04:32:52 +0000
Certificate not after:    Thu 09 Jul 2026 04:32:52 +0000
Subordinate resources:    IP: 23.154.88.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:70:ec:5e:78:a2:5c:e8:5f:52:bb:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr  5 04:32:52 2024 GMT
            Not After : Jul  9 04:32:52 2026 GMT
        Subject: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:85:49:36:aa:87:db:2b:de:d8:ff:b3:77:
                    88:6c:3b:81:4e:ea:3f:5a:5a:4c:c7:72:e6:40:94:
                    12:68:4a:5f:e6:d6:2e:03:d1:1f:66:eb:9d:a0:4d:
                    dd:14:a6:7f:66:a3:b9:20:9b:7d:2b:f6:46:4f:5c:
                    63:f8:3c:7d:b6:ea:99:78:7c:02:cb:a4:04:70:47:
                    07:60:8d:b8:3e:b8:b4:7c:75:8a:1d:d0:1f:8b:45:
                    39:ef:13:54:f9:05:0f:e5:70:41:bb:b9:04:76:a0:
                    a0:2a:33:d0:02:0e:de:eb:01:e1:7c:aa:e0:08:08:
                    08:b9:a8:a3:68:db:30:8a:62:93:4b:b4:55:2a:fb:
                    69:ab:02:90:1b:24:4c:60:a7:58:9f:73:72:85:cf:
                    6c:e2:e3:a9:99:6a:e2:fd:06:23:71:62:6a:98:15:
                    77:14:15:6e:19:97:38:7b:51:4f:4f:58:88:94:a1:
                    d8:d6:2f:32:74:97:d4:0c:96:5d:c9:fe:c1:73:1b:
                    11:6e:cf:5b:80:c8:75:e8:8b:d4:3d:b7:d6:e8:5a:
                    41:2e:3b:42:0f:00:8a:13:14:da:1d:ec:12:42:93:
                    0f:28:9c:f5:24:6c:8b:0c:8d:5d:79:82:ee:07:19:
                    37:27:c1:39:5a:fa:e6:1d:4e:d0:82:b8:40:dc:47:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:1c:ea:0c:ce:9e:2b:a2:ca:45:0e:84:ea:a4:ed:e0:33:ff:
         78:47:d0:da:97:23:ea:25:bd:3b:9c:f5:42:ac:c3:a7:1d:e6:
         ac:c2:de:fb:3f:8d:18:0d:6c:fd:ab:b7:bb:5c:19:59:70:26:
         b2:20:65:cf:14:10:5c:80:ed:7e:5d:73:34:3a:be:2c:61:f4:
         a6:53:28:ed:24:a6:cd:f9:6e:57:bd:c6:0f:72:e5:1c:28:e8:
         42:7a:e3:41:d5:bc:e0:7c:36:4e:b1:f6:ea:03:03:4b:28:48:
         10:76:65:18:b0:d7:f5:58:41:7b:aa:3b:b5:d0:17:0a:24:33:
         eb:20:dc:eb:e7:3d:c4:f0:53:2d:5d:28:b2:dd:2c:cf:b3:03:
         4d:5a:00:bc:f0:c5:5c:2c:ee:c2:4b:5a:02:05:95:d6:37:98:
         77:6c:19:14:d7:ed:c6:66:df:fb:54:c2:3f:28:19:cd:35:7c:
         9b:82:9d:bb:84:aa:18:c7:dc:de:9a:35:ff:78:96:37:aa:7f:
         40:f1:f0:22:bc:d1:8f:5c:80:dd:6e:81:8d:17:52:b1:5c:03:
         fa:9e:60:c2:95:ca:e2:b5:73:6f:42:45:f6:26:7b:6c:cb:72:
         25:d8:12:0d:cc:5b:e0:4d:2b:65:fa:17:4e:e2:c5:30:c3:09:
         20:48:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----